ROAB Developments Limited (trading as "Simply Gift", "we", "us", or "our") operates the website at www.simplygift.co.uk and the Simply Gift application. We are registered in England and Wales.
For the purposes of UK data protection law, ROAB Developments Limited is the data controller of the personal data described in this policy. We are registered with the Information Commissioner's Office (ICO) — our registration number will be displayed here once confirmed. If you have any questions, you can reach us at hello@simplygift.co.uk.
We take your privacy seriously. We do not sell your data, we do not show adverts, and we only ever use your information to run Simply Gift for you.
We collect your first name, last name, email address, and a hashed version of your password. We use this to create and authenticate your account and to send you service-related emails (such as a welcome message, and notifications about your gift lists).
Lawful basis: Performance of a contract — we need this information to provide the service you've signed up for.
We store the content you create — gift groups, gift lists, recipient profiles, gift items, contributions, and any group codes you generate or use. This is the core data that makes Simply Gift work.
Lawful basis: Performance of a contract.
If you invite someone by email, we store their email address and generate a time-limited invite code. The invite expires after 7 days. If they don't sign up, we do not use their email address for any other purpose.
Lawful basis: Legitimate interests — helping you coordinate gift-giving with people you've chosen to invite.
We use Google Analytics to understand how visitors use our website (page views, device types, approximate geography). This data is anonymised and aggregated. We do not track individual behaviour across other websites.
Our servers may also log standard technical data such as IP addresses, browser types, and access times for security and debugging purposes. This data is not used for profiling.
Lawful basis: Legitimate interests — maintaining and improving the security and performance of our service.
We will never use your data to send you unsolicited marketing emails. If we ever introduce optional marketing communications, we will ask for your explicit consent first.
We use a small number of carefully selected third-party services to operate Simply Gift. We do not sell your data to any third party.
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database hosting (stores your account and gift list data) | EU (Ireland) |
| Railway | Application server hosting | EU |
| Vercel | Web application hosting | Global CDN |
| Resend | Transactional email delivery | EU |
| Google Analytics | Website analytics (anonymised) | USA (Standard Contractual Clauses apply) |
| Anthropic | AI-powered gift recommendations (processes gift list content to generate suggestions) | USA (Standard Contractual Clauses apply) |
All third-party processors are bound by data processing agreements and are required to handle your data securely and only for the purposes we have specified.
Your data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including the use of UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs). This applies to the following transfers:
We keep your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain certain information by law (for example, for fraud prevention or legal compliance purposes).
Expired invite records are automatically purged after 90 days. Analytics data is retained by Google for 26 months by default.
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
To exercise any of these rights, email us at hello@simplygift.co.uk. We will respond within one month. There is no charge for exercising your rights.
We use a small number of cookies on our website. The Simply Gift application itself uses browser local storage (not cookies) to keep you logged in. For full details of the cookies we use, please read our Cookie Policy.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:
No method of transmission over the internet is 100% secure. If you become aware of any security concern, please contact us immediately at hello@simplygift.co.uk.
Simply Gift is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.
We recognise that users aged 13–17 may use Simply Gift — for example, to manage their own wishlists or participate in group gifting. In line with the ICO's Age Appropriate Design Code (Children's Code), we apply privacy-protective defaults for all users: we do not use behavioural profiling, we do not serve advertising, and we do not share personal data beyond what is necessary to operate the service.
Parents and guardians may create recipient profiles (such as a child's gift list) on behalf of their children. In doing so, they take responsibility for the appropriateness of any information entered.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. We encourage you to review this policy periodically.
If you have a concern about how we handle your personal data, please contact us first at hello@simplygift.co.uk and we will do our best to resolve it.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority:
For any privacy-related questions, requests, or complaints: